Related VulnerabilitiesPoCdify-ssrf-remote-upload: Dify < 1.13.0 - Unauthenticated SSRF via Remote File UploadPoCCVE-2026-28288: Dify User Enumeration via Observable Response DiscrepancyDify /console/api/remote-files/ 服务器端请求伪造漏洞（CVE-2025-56520）Dify存在用户名枚举漏洞(CVE-2025-11750)PoCCVE-2025-56520: Dify v1.6.0 - Server-Side Request ForgeryPoCCVE-2025-63387: Dify v1.9.1 - Broken Access ControlDify存在远程命令执行漏洞Dify /console/api/remote-files/upload 服务器端请求伪造漏洞western-digital-mycloud-multi-uploadify-file-upload: Western Digital MyCloud Multi Uploadify File UploadPoCweaver-lazyuploadify-file-upload: OA E-Office LazyUploadify - Arbitrary File UploadPoCweaver-uploadify-file-upload: OA E-Office Uploadify - Arbitrary File UploadPoCCVE-2025-11750: Dify - User Enumeration via "Account not found" Message